JP6359188B2 - Authentication apparatus, authentication system, and authentication method - Google Patents

Description

  The present invention relates to an authenticity determination device that determines whether a device is a genuine product or a counterfeit product.

  With the development of equipment manufacturing technology, it has become relatively easy to manufacture counterfeits that appear to be legitimate equipment, and the importance of authenticity determination technology for distinguishing between legitimate and counterfeit goods is increasing. As one method of authenticating, authenticating information that can be generated only by authorized device manufacturers is affixed to the device in the form of a barcode or two-dimensional barcode, and this barcode is attached. There is a method of determining authenticity by reading. Patent Document 1 discloses a method that enables authenticity determination by encrypting identification information unique to each device with a key known only to a legitimate device manufacturer and assigning the obtained encrypted data to the device. ing.

JP 2007-166519 A

  According to the method of Patent Document 1, only a legitimate device manufacturer can generate correct authentication information as a barcode, so that a malicious attacker appropriately creates authentication information. Also provides a mechanism to detect this. However, when an attacker obtains a legitimate device, the imitation that passes the authenticity judgment by duplicating the barcode that is the correct authentication information given to the device and giving it to the imitated device separately. There is a problem that it becomes possible to make goods. It is possible to detect fraud when a plurality of pieces of information for the same authenticity determination are found, but this method may not function when authenticity determination is performed only for a small number of devices. .

  The present invention has been made in order to solve the above-described problem, and not only the information on the barcode but also the information on the components constituting the inside of the device is simultaneously acquired to determine the authenticity, thereby reproducing the barcode. It is an object of the present invention to realize an authenticity determination device that can detect counterfeit products.

  In order to solve the above-described problem, an authenticity determination device according to the present invention is an apparatus that indicates component information that indicates information about components that constitute the determination target device in which authenticity is determined, and information that is unique to the determination target device. A communication unit that receives information, signature information for a set of device information and component information of a determination target device, a verification key storage unit that stores a verification key corresponding to a generation key that generated the signature information, and a verification key A signature verification unit that verifies the validity of a set of component information, device information, and signature information received by the communication unit, and a determination that determines the authenticity of the determination target device based on the validity verified by the signature verification unit A part.

  According to the present invention, it is possible to detect counterfeit products by duplicating barcodes by simultaneously acquiring information on components constituting the device and performing authenticity determination.

It is a figure which shows the example of 1 structure of the authenticity determination system which determines the correctness of the determination target apparatus 2 by the authenticity determination apparatus 1 which concerns on Embodiment 1. FIG. It is a figure which shows one structural example of the authenticity determination apparatus 1 which concerns on Embodiment 1. FIG. It is a figure which shows an example of the hardware constitutions of the authenticity determination apparatus. It is a figure which shows the example of 1 structure of the determination target apparatus 2 which concerns on Embodiment 1. FIG. It is a figure which shows an example of the components information which the components information storage part 41 memorize | stores. It is a figure which shows an example of the apparatus information which the apparatus information storage part 44 memorize | stores. 3 is a diagram illustrating an example of a hardware configuration of a determination target device 2. FIG. It is a figure which shows the example of 1 structure of the determination information registration apparatus 3 which concerns on Embodiment 1. FIG. It is a figure which shows an example of the production | generation key and verification key which the signature key pair memory | storage part 81 memorize | stores. 3 is a diagram illustrating an example of a hardware configuration of a determination information registration device 3. FIG. It is a figure which shows the example of 1 structure of the determination information acquisition apparatus 5 which concerns on Embodiment 1. FIG. It is a figure which shows an example of the hardware constitutions of the determination information acquisition apparatus. 4 is a flowchart showing a flow of operations of a determination information registration apparatus 3 according to Embodiment 1. 4 is a flowchart showing a flow of operations of the authenticity determination device 1 according to the first embodiment. It is a figure which shows the example of 1 structure of the authenticity determination system which determines the correctness of the determination object apparatus 2 already connected to the network by the authenticity determination apparatus 1 which concerns on Embodiment 2. FIG. It is a figure which shows one structural example of the authenticity determination apparatus 1 which concerns on Embodiment 2. FIG. It is a figure which shows the example of 1 structure of the determination target apparatus 2 which concerns on Embodiment 2. FIG. It is a figure which shows one structural example of the determination information acquisition apparatus 5 which concerns on Embodiment 2. FIG. 6 is a flowchart showing a flow of operations of the authenticity determination device 1 according to the second embodiment.

Embodiment 1 FIG.
FIG. 1 is a diagram illustrating a configuration example of an authenticity determination system 4 that determines the validity of a determination target device 2 by an authenticity determination device 1 according to the first embodiment.
In FIG. 1, the authenticity determination system 4 includes a determination target device 2 that is a determination target of authenticity, and a determination information acquisition device 5 that acquires determination information for determining authenticity from the determination target device 2. The determination information is, for example, component information, device information, signature information, etc. regarding the determination target device 2. Further, the authenticity determination device 1 is connected to the determination information acquisition device 5 via the network 6, and based on the determination information acquired by the determination information acquisition device 5, the validity of the determination target device 2 is obtained using digital signature technology. Judgment.

  In the authenticity determination device 1 and the determination target device 2, determination information for determining authenticity is registered by the determination information registration device 3 when the authenticity determination system 4 is manufactured in a factory. Thereafter, the authenticity determination system 4 including the authenticity determination device 1 and the determination target device 2 in which the determination information is registered is shipped from the factory as a product.

FIG. 2 is a diagram illustrating a configuration example of the authenticity determination device 1 according to the first embodiment.
The authenticity determination device 1 receives a request from the determination information acquisition device 5 and determines the authenticity of the determination target device 2 using a digital signature technique. In FIG. 2, the verification key storage unit 20 stores a signature verification key for verifying the signature information stored in the signature storage unit 45 of the determination target device 2.

  The signature verification unit 21 performs signature verification processing using the signature verification key stored in the verification key storage unit 20. This signature verification process can be realized by using a signature verification technique which is an existing encryption technique.

  The determination unit 22 determines the authenticity of the determination target device 2 based on the result of the signature verification process performed by the signature verification unit 21.

  The communication unit 23 is a communication module that performs communication with the outside of the authenticity determination device 1.

FIG. 3 is a diagram illustrating an example of a hardware configuration of the authenticity determination device 1.
The authenticity determination device 1 is a computer, and each component of the authenticity determination device 1 can be realized by a program. As a hardware configuration of the authenticity determination device 1, a memory 31, a processor 32, a communication module 33, an input interface 34, and a display 35 are connected to a bus 30.

  The memory 31 is, for example, a main storage device such as a RAM (Random Access Memory), or an external storage device such as a ROM (Read Only Memory), a flash memory, or a hard disk device.

  The processor 32 is a CPU (Central Processing Unit) that executes a program.

  The communication module 33 is an electronic circuit that executes data communication processing, and is, for example, a communication board.

  The input interface 34 is a device that processes input data to the authenticity determination device 1, and is, for example, a touch panel, a hardware key, a mouse, a keyboard, or the like.

  The display 35 is a device that displays output data of the authentication result of the authentication device 1.

  The program is normally stored in the memory 31, and is read and executed by the processor 32. This program is a program that realizes the functions described as the signature verification unit 21, the determination unit 22, and the communication unit 23 that constitute the authenticity determination device 1.

  Further, an operating system (OS) is also stored in the external storage device of the memory 31, and at least a part of the OS is loaded into the main storage device, and the processor 32 executes the program while executing the OS. .

  In the following description of the embodiment, information and data stored in the verification key storage unit 20, information, data, signal values, and variable values indicating processing results of the signature verification unit 21, the determination unit 22, and the communication unit 23 are described. Is stored in the memory 31 as a file.

  Note that the configuration in FIG. 3 is merely an example of the hardware configuration of the apparatus, and the hardware configuration of the apparatus is not limited to the configuration described in FIG. 3 and may be other configurations.

FIG. 4 is a diagram illustrating a configuration example of the determination target device 2 according to the first embodiment.
The determination target device 2 stores determination information for proving that it is a legitimate device, and transmits the determination information to the determination information acquisition device 5.

  In FIG. 4, a part 40 represents a certain group of components of the determination target device 2. For example, an example of the component 40 is the entire inside of the apparatus, excluding the housing portion, of the determination target apparatus 2. In the present embodiment, a case where the determination target device 2 has a single component 40 will be described, but the determination target device 2 may have a plurality of components.

The component information storage unit 41 stores component information that is information related to the component 40.
FIG. 5 is a diagram illustrating an example of component information stored in the component information storage unit 41.
In FIG. 5, examples of the component information include a component name, a component manufacturing date, a component serial number, and the like.

  In response to the acquisition request from the communication unit 43, the component information acquisition unit 42 acquires the component information stored in the component information storage unit 41 and transmits the acquired component information to the communication unit 43.

The device information storage unit 44 stores device information that is information unique to the determination target device 2.
FIG. 6 is a diagram illustrating an example of device information stored in the device information storage unit 44.
In FIG. 6, examples of device information include a device name, a device manufacturing date, a device serial number, and the like. In the present embodiment, it is assumed that the device information is stored in an optically readable form such as a barcode or a two-dimensional code.

  The signature storage unit 45 generates a signature generation key stored in the signature key pair storage unit 81 of the determination information registration device 3 for the component information stored in the component information storage unit 41 and the device information stored in the device information storage unit 44. The signature information as a result of the signature generation process is stored. In the present embodiment, it is assumed that the signature information is stored in an optically readable form such as a barcode or a two-dimensional code.

  The communication unit 43 is a communication module that performs communication with the outside of the determination target device 2.

FIG. 7 is a diagram illustrating an example of a hardware configuration of the determination target device 2.
The determination target device 2 is a computer, and each component of the determination target device 2 can be realized by a program. As a hardware configuration of the determination target apparatus 2, a memory 71, a processor 72, a communication module 73, an input interface 74, and a display 75 are connected to a bus 70.

  The memory 71 is, for example, a main storage device such as a RAM (Random Access Memory), an external storage device such as a ROM (Read Only Memory), a flash memory, or a hard disk device.

  The processor 72 is a CPU (Central Processing Unit) that executes a program.

  The communication module 73 is an electronic circuit that executes data communication processing, and is, for example, a communication board.

  The input interface 74 is a device that processes input data for the determination target device 2 and is, for example, a touch panel, a hardware key, a mouse, a keyboard, or the like.

  The display 75 is a device that displays output data from the determination target apparatus 2.

  The program is normally stored in the memory 71, and is read and executed by the processor 72. This program is a program that realizes the functions described as the component information acquisition unit 42 and the communication unit 43 that constitute the determination target device 2.

  Further, an operating system (OS) is also stored in the external storage device of the memory 71. At least a part of the OS is loaded into the main storage device, and the processor 72 executes the above program while executing the OS. .

  In the description of the following embodiment, information and data stored in the component information storage unit 41, information, data, signal values, and variable values indicating processing results of the component information acquisition unit 42 and the communication unit 43 are stored in the memory. 71 is stored as a file.

  7 is merely an example of the hardware configuration of the device, and the hardware configuration of the device is not limited to the configuration described in FIG. 7 and may be other configurations.

FIG. 8 is a diagram illustrating a configuration example of the determination information registration apparatus 3 according to the first embodiment.
The determination information registration device 3 registers determination information, which is information for authenticity determination, in the authenticity determination device 1 or the determination target device 2.
In FIG. 8, a signature key pair generation unit 80 generates a pair of signature generation key and verification key necessary for using a digital signature. The process of generating the pair of the generation key and the verification key can be realized using a public key encryption technique that is an existing encryption technique. For example, an RSA encryption private key is generated as a signature generation key, and an RSA encryption public key paired with the secret key is generated as a signature verification key.

The signature key pair storage unit 81 is a memory that stores a signature generation key / verification key pair generated by the signature key pair generation unit 80.
FIG. 9 is a diagram illustrating an example of the generation key and the verification key stored in the signature key pair storage unit 81.
In FIG. 9, the signature key pair storage unit 81 stores the generated key ks and the verification key kv as a pair.

  The signature generation unit 82 uses the generation key generated by the signature key pair generation unit 80 to generate signature information that is a digital signature for a given input. This signature information generation process can be realized by using public key encryption technology which is an existing encryption technology.

  The determination information registration unit 84 registers the signature verification key stored in the signature key pair storage unit 81, the signature information generated by the signature generation unit 82, and the like in the authenticity determination device 1 and the determination target device 2. When the signature information is stored in the form of a barcode or the like as in the present embodiment, the determination information registration unit 84 includes a barcode printer that prints the barcode or the like.

  The communication unit 83 is a communication module that performs communication with the outside of the determination information registration device 3.

FIG. 10 is a diagram illustrating an example of a hardware configuration of the determination information registration device 3.
The determination information registration device 3 is a computer, and each component of the determination information registration device 3 can be realized by a program. As a hardware configuration of the determination information registration apparatus 3, a memory 101, a processor 102, a barcode printer 103, a communication module 104, an input interface 105, and a display 106 are connected to a bus 100.

  The memory 101 is an external storage device such as a main storage device such as a RAM (Random Access Memory), a ROM (Read Only Memory), a flash memory, or a hard disk device.

  The processor 102 is a CPU (Central Processing Unit) that executes a program.

  The barcode printer 103 is a device that prints signature information as a barcode when the signature information is stored in the form of a barcode or the like.

  The communication module 104 is an electronic circuit that executes data communication processing, and is, for example, a communication board.

  The input interface 105 is a device that processes input data to the determination information registration device 3, and is, for example, a touch panel, a hardware key, a mouse, a keyboard, or the like.

  The display 106 is a device that displays output data of the determination information registration device 3.

  The program is normally stored in the memory 101, read into the processor 102, and executed. This program is a program that implements the functions described as the signature key pair generation unit 80, the signature generation unit 82, the communication unit 83, and the determination information registration unit 84 that constitute the determination information registration device 3.

  Further, an operating system (OS) is also stored in the external storage device of the memory 101. At least a part of the OS is loaded into the main storage device, and the processor 102 executes the above program while executing the OS. .

  In the following description of the embodiment, the information and data stored in the signature key pair storage unit 81, the processing results of the signature key pair generation unit 80, the signature generation unit 82, the communication unit 83, and the determination information registration unit 84 are shown. Information, data, signal values, and variable values to be shown are stored in the memory 101 as files.

  Note that the configuration of FIG. 10 is merely an example of the hardware configuration of the device, and the hardware configuration of the device is not limited to the configuration described in FIG. 10 and may be other configurations.

FIG. 11 is a diagram illustrating a configuration example of the determination information acquisition apparatus 5 according to the first embodiment.
The determination information acquisition device 5 acquires the determination information for authenticity determination from the determination target device 2 and requests the authenticity determination device 1 for authenticity determination. In FIG. 11, the component information acquisition unit 110 acquires the component information stored in the component information storage unit 41 of the determination target device 2. Acquisition of component information may be performed via a wired connection such as a USB (Universal Serial Bus) connection, or may be performed via a wireless connection using NFC (Near Field Communication) or RFID (Radio Frequency IDentifier). good.

  The device information acquisition unit 111 acquires device information stored in the device information storage unit 44 of the determination target device 2 and signature information stored in the signature information storage unit 45. When the device information and signature information are stored in the form of a barcode or the like as in the present embodiment, the device information acquisition unit 111 can be realized by, for example, a barcode reader or a camera.

  The display unit 113 is a display that displays the authentication result received from the authentication device 1.

  The communication unit 112 is a communication module that performs communication with the outside of the determination information acquisition device 5.

FIG. 12 is a diagram illustrating an example of a hardware configuration of the determination information acquisition apparatus 5.
The determination information acquisition device 5 is a computer, and each component of the determination information acquisition device 5 can be realized by a program. As a hardware configuration of the determination information acquisition apparatus 5, a memory 121, a processor 122, a barcode reader 123, a camera 124, a communication module 125, an input interface 126, and a display 127 are connected to the bus 120.

  The memory 121 is, for example, a main storage device such as a RAM (Random Access Memory), an external storage device such as a ROM (Read Only Memory), a flash memory, or a hard disk device.

  The processor 122 is a CPU (Central Processing Unit) that executes a program.

  The barcode reader 123 is a device that reads the barcode and obtains the signature information when the signature information is stored in the form of a barcode or the like.

  Similar to the barcode reader 123, the camera 124 is a camera having a function of reading the barcode and acquiring the signature information when the signature information is stored in the form of a barcode or the like.

  The communication module 125 is an electronic circuit that executes data communication processing, and is, for example, a communication board.

  The input interface 126 is a device that processes input data to the determination information acquisition apparatus 5, and is, for example, a touch panel, a hardware key, a mouse, a keyboard, or the like.

  The display 127 is a device that displays output data of the determination information acquisition device 5.

  The program is normally stored in the memory 121, and is read and executed by the processor 122. This program is a program that realizes the functions described as the component information acquisition unit 110, the device information acquisition unit 111, and the communication unit 112 that constitute the determination information acquisition device 5.

  Furthermore, an operating system (OS) is also stored in the external storage device of the memory 121. At least a part of the OS is loaded into the main storage device, and the processor 122 executes the program while executing the OS. .

  In the following description of the embodiment, information, data, signal values, and variable values indicating the processing results of the component information acquisition unit 110, the device information acquisition unit 111, and the communication unit 112 are stored as files in the memory 121. ing.

  The configuration in FIG. 12 is merely an example of the hardware configuration of the device, and the hardware configuration of the device is not limited to the configuration described in FIG. 12 and may be other configurations.

  Next, an operation flow of the authenticity determination system 4 according to the first embodiment will be described. The operation of the authenticity determination system 4 is roughly divided into four processes: (1) initial setting of the entire system, (2) determination information registration processing, (3) signature verification key registration processing, and (4) authentication determination processing. The Hereinafter, each processing will be described with reference to flowcharts. In addition, the communication part of each apparatus is utilized for transmission / reception of information between apparatuses.

  In the processes (1) to (3) described above, the determination information registration device 3 registers determination information, which is information necessary for authenticity determination, to the authenticity determination device 1 and the determination target device 2. In the present embodiment, the determination target device 2 is manufactured before the main registration process, the component information of the device is stored in the component information storage unit 41, and device information that is unique information about the device is stored. , And stored in the device information storage unit 44.

FIG. 13 is a flowchart showing a flow of operation of the determination information registration apparatus 3 according to the first embodiment.
(1) Initial setting of the entire system First, in step S100, the signature key pair generation unit 80 of the determination information registration apparatus 3 sets a pair of signature generation key k _s and verification key k _v necessary for using the digital signature. Generate. In the generation process of the signature generation key k _s and the verification key k _v , for example, the following key generation algorithm is executed.
<Key generation algorithm>
Step 1: Generate sufficiently large prime numbers p and q, and set n = pq.
Step 2: Let φ be Euler's φ function, and select a positive number e that is less than φ (n) and relatively prime to φ (n).
Step 3: Obtain a positive number c such that ce = 1 (mod φ (n)).
Step 4: c is determined as a generated key k _s that is secret information, and e and n are determined as a verification key k _v that is public information.

The signature key pair generation unit 80 stores a pair of the generated signature generation key k _s and the verification key k _v in the signature key pair storage unit 81. The above is the initial setting process of the entire system (1).

(2) Determination Information Registration Process Next, in step S101, the signature generation unit 82 acquires the component information p from the component information storage unit 41 of the determination target device 2 via the communication unit 83, and stores the device information. Device information d is acquired from the unit 44. Specifically, the signature generation unit 82 transmits an acquisition request for component information p and device information d to the communication unit 43 of the determination target device 2. The communication unit 43 acquires the component information p stored in the component information storage unit 41 by the component information acquisition unit 42 and transmits the component information p to the communication unit 83 of the determination information registration device 3. The communication unit 43 acquires the device information d stored in the device information storage unit 44 and transmits the device information d to the communication unit 83 of the determination information registration device 3. The communication unit 83 transmits the received component information p and device information d to the signature generation unit 82.

  Note that the component information p and the device information d are given, for example, by connecting individual component information and device information stored in the component information storage unit 41 and the device information storage unit 44. Specifically, in the example of the component information p in FIG. 5, p = XYZ-parts201412011111111 is given, and in the example of the device information d in FIG. 6, d = ABC-device20130115012345 is given.

Next, in step S102, the signature generation unit 82 generates signature target information m as a concatenation of the component information p and the device information d, and the signature generation key k _s for the signature target information m is as follows. A signature generation operation Fs is performed to generate signature information s.
<Signature generation operation>
s = Fs (m, c) = m ^c (mod n)
Here, m: signature target information, c: secret information, and n: public information.
Here, since it is c = _{k s,}
s = Fs (m, k _s ) = m ^ks (mod n)

  Next, in step S <b> 103, the determination information registration unit 84 registers the signature information s in the signature storage unit 45 of the determination target device 2. Specifically, the determination information registration unit 84 transmits a registration request for the signature information s together with the signature information s to the communication unit 43 of the determination target device 2 via the communication unit 83. The received signature information s is registered in the signature storage unit 45. The above is the determination information registration process (2).

(3) Signature verification key registration processing Next, in step S104, determination information registration section 84 transmits a verification key k _v to authenticity determination device 1, the authenticity determination apparatus 1 verifies the verification key k _v received Register in the key storage unit 20. The above is the signature verification key registration process of (3).

(4) Authenticity Determination Processing Next, in the authentication determination processing, the authentication determination device 1 registered with the verification key in (3) determines the validity of the determination target device 2.
FIG. 14 is a flowchart showing an operation flow of the authenticity determination apparatus 1 according to the first embodiment.
First, in step S200, the component information acquisition unit 110 of the determination information acquisition device 5 acquires the component information p stored in the component information storage unit 41 of the determination target device 2.

  Next, in step S201, the device information acquisition unit 111 of the determination information acquisition device 5 acquires the device information d stored in the device information storage unit 44 of the determination target device 2 and the signature information s stored in the signature storage unit 45. To do.

  Next, in step S <b> 202, the communication unit 112 of the determination information acquisition device 5 transmits the acquired combination of component information p, device information d, and signature information s to the authenticity determination device 1.

Next, in step S203, the signature verification unit 21 of the authenticity determination apparatus 1, the received signature information s is the component information p, whether the correct signature information for device information d, verification key k _v signature verification operations F _{Perform v} to verify. Specifically, the signature verification unit 21 generates signature target information m as a concatenation of the component information p and the device information d, and performs the following signature verification calculation Fv on the signature target information m to obtain the signature target. The validity of the set of information m and signature information s is verified, and a verification result r is obtained.
<Signature verification operation>
r = Fv (m, s, e) = “successful verification” (when m = s ^e (mod n))
“Verification failure” (when m ≠ s ^e (mod n))
Here, m: signature target information, s: signature information, e, n: public information (verification key k _v ).

  Next, in step S <b> 204, the determination unit 22 determines whether the verification is successful based on the verification result r by the signature verification unit 21. If the verification result r is “verification successful”, the process proceeds to step S205 due to a Yes branch, and notifies the determination information acquisition apparatus 5 that the determination target apparatus 2 is a valid apparatus. If the verification result r is “verification failure”, the process proceeds to step S206 due to a No branch, and notifies the determination information acquisition apparatus 5 that the determination target apparatus 2 is not a valid apparatus. The determination information acquisition device 5 notified of the determination result displays the determination result on the display unit 113 together with the device information d. The above is the authenticity determination process of (4).

  As described above, the invention according to the first embodiment has an effect of making it possible to detect counterfeit products by duplicating barcodes by simultaneously acquiring information on the components constituting the inside of the device and performing authenticity determination. It is done. Since the legitimacy of the set of component information p, device information d, and signature information s is confirmed by digital signature technology, a malicious attacker can obtain only a barcode including the device information d and signature information s. However, as long as there is no corresponding part, it is not possible to make a counterfeit product that passes the authentication.

  Further, even when there is a corresponding part, it is more difficult to duplicate the part than to duplicate the barcode, so that it is possible to make it difficult to manufacture a counterfeit product. In addition, there is an effect that it is difficult for an attacker who obtains only discarded parts to manufacture a counterfeit product that passes the authenticity determination.

  In the first embodiment, a digital signature technique based on public key cryptography is used, and a signature generation key and a verification key have different values. However, as a digital signature technique based on common key cryptography, for example, HMAC (Hash) A technique such as -based Message Authentication Code) may be used. In this case, the signature generation key and the verification key have the same value.

  In the first embodiment, in the authenticity determination process of (4), the authenticity determination device 1 performs only signature verification. However, additional verification related to authenticity determination may be performed. As an example of additional verification, the same information is included in the part information and the device information, and the verification method for confirming the identity, or the validity of the relationship between the part manufacturing date and the device manufacturing date Or a verification method for storing a history of authenticity determination and confirming consistency with the history.

  In the first embodiment, the signature information is generated from the component information and the device information. However, the signature information may be generated only from the component information. In particular, the determination target device 2 may not have the device information storage unit 44. However, in this case, an additional verification method in the authenticity determination device 1 as described above is limited.

  In the first embodiment, the component information and device information related to the determination target device 2 are stored in the component information storage unit 41 and the device information storage unit 44 before the determination information registration process (2). However, the determination information registration device 3 may store the component information and the device information in the determination target device 2.

  In the first embodiment, the device information storage unit 44 and the signature storage unit 45 of the determination target device 2 are described separately. However, they may be stored together in the same storage area. In particular, device information and signature information may be included in a single barcode.

  In the first embodiment, the determination target device 2 has a single component, but the determination target device 2 may have a plurality of components. In the case of having a plurality of parts information for a plurality of parts, it is possible to verify whether the combination of all the parts is correct by including all the parts information in the signature target information.

  In the first embodiment, the signature target information is generated as a concatenation of the component information and the device information. However, if the signature target information is definitely generated based on each information, the signature target information is generated by any method. You may do it.

  In the first embodiment, the determination information acquisition device 5 and the authenticity determination device 1 are separate devices. However, a single device may serve both functions. In the present embodiment, the determination information registration device 3 and the authenticity determination device 1 are separate devices, but a single device may serve both functions.

  In the first embodiment, the determination information registration device 3 uses a generation key and a verification key that are common to all determination target devices, but generates a different generation key and verification key for each determination target device. May be. However, in this case, it is necessary for the verification key storage unit 20 of the authenticity determination device 1 to store a plurality of verification keys in association with each determination target device.

Embodiment 2. FIG.
In the first embodiment, the determination information acquisition device 5 acquires component information, device information, and signature information from the determination target device 2 and performs authenticity determination. At this time, since the device information and the signature information are stored in an optically readable form such as a bar code or a two-dimensional code, the information can be acquired by a simple operation. On the other hand, since the component is in the determination target apparatus 2, the component information needs to be acquired through a wired connection such as a USB connection or a wireless connection such as NFC or RFID. However, when using a USB connection or the like, if there are a large number of determination target devices 2, it is necessary to switch the connection for each determination, and there is a problem that the operation becomes complicated. In the case of a wireless connection such as NFC or RFID, this problem does not occur, but instead, an additional component for using NFC or RFID (for example, for each of the determination target device 2 and the determination information acquisition device 5) IC chip, dedicated circuit, etc.) are required, leading to an increase in the cost of each device.

  On the other hand, in recent years, it has become common for devices to have a function of connecting to a network such as the Internet, and there are increasing cases in which devices are always connected to a network. In this case, if the component information is acquired via a connected network (for example, the Internet), the authenticity determination using the component information can be performed without the above-described operation and the cost of the apparatus. In the second embodiment, authenticity determination can be performed with higher accuracy than in the case of a single barcode, with the same level of effort as in the case of a single barcode, by acquiring component information via a connected network. An embodiment for realizing the system will be described.

Next, the configuration of the authenticity determination device 1 according to the second embodiment will be described.
FIG. 15 is a diagram illustrating a configuration example of the authenticity determination system that determines the validity of the determination target apparatus 2 that is already connected to the network by the authenticity determination apparatus 1 according to the second embodiment.
In FIG. 15, the authenticity determination system 4 includes a determination target device 2 that is already connected to the network, and a determination information acquisition device 5 that acquires determination information for determining authenticity from the determination target device 2. Further, the authenticity determination device 1 is connected to the determination information acquisition device 5 via the network 6, and based on the determination information acquired by the determination information acquisition device 5, the validity of the determination target device 2 is obtained using digital signature technology. Judgment.

  As in the first embodiment, when the authenticity determination system 4 is manufactured in a factory, the determination information registration apparatus 3 registers determination information for determining authenticity in the authenticity determination apparatus 1 and the determination target apparatus 2. Is done. Thereafter, the authenticity determination system 4 including the authenticity determination device 1 and the determination target device 2 in which the determination information is registered is shipped from the factory as a product.

FIG. 16 is a diagram illustrating a configuration example of the authenticity determination device 1 according to the second embodiment.
The authenticity determination device 1 receives a request from the determination information acquisition device 5 and determines the authenticity of the determination target device 2 using a digital signature technique. In FIG. 16, the received data verification unit 160 verifies the validity of the set of component information, device information, and signature information received by the communication unit 23. Other configurations are the same as those in the first embodiment.

  Further, the hardware configuration of the authenticity determination device 1 is the same as that shown in FIG. 3, and the program stored in the memory 31 realizes the function of the received data verification unit 160.

FIG. 17 is a diagram illustrating a configuration example of the determination target device 2 according to the second embodiment.
The determination target device 2 stores determination information for proving that it is a legitimate device, and transmits the determination information to the determination information acquisition device 5.

  In FIG. 17, the input unit 170 receives an input from the outside of the determination target device 2. The input unit 170 can be realized using a button, a touch panel, or the like.

  The communication unit 43 is a communication module that performs communication with the outside. In the second embodiment, it is assumed that the determination target device 2 is always connected to the network via the communication unit 43 and is communicable with the authenticity determination device 1.

  The other configuration in FIG. 17 is the same as the configuration of the same name in the determination target device 2 of the first embodiment.

  Further, the hardware configuration of the determination target device 2 is the same as the configuration illustrated in FIG. 7, and the input unit 170 is the input interface 74.

FIG. 18 is a diagram illustrating a configuration example of the determination information acquisition apparatus 5 according to the second embodiment.
The determination information acquisition device 5 acquires the determination information for authenticity determination from the determination target device 2 and requests the authenticity determination device 1 for authenticity determination.
Each configuration in FIG. 18 is the same as the configuration of the same name in the determination information acquisition device 5 of the first embodiment. However, unlike the determination information acquisition device 5 of the first embodiment, the component information acquisition unit 110 is not provided.

  Next, an operation flow of the authenticity determination system 4 according to the second embodiment will be described. As in the first embodiment, the operation of the authenticity determination system 4 includes (1) initial setting of the entire system, (2) determination information registration processing, (3) signature verification key registration processing, (4) authenticity determination processing, It is roughly divided into four. Among these, the processes (1) to (3) are the same as those in the first embodiment, and thus the description thereof is omitted. Hereinafter, (4) authenticity determination processing will be described.

(4) Authenticity Determination Processing FIG. 19 is a flowchart showing an operation flow of the authentication determination device 1 according to the second embodiment.
First, in step S300, the device information acquisition unit 111 of the determination information acquisition device 5 acquires the device information d stored in the device information storage unit 44 of the determination target device 2 and the signature information s stored in the signature storage unit 45. .

  Next, in step S <b> 301, the communication unit 112 of the determination information acquisition device 5 transmits the acquired combination of the device information d and the signature information s to the authenticity determination device 1. Note that the execution status of the transmission process of the communication unit 112 is displayed on the display unit 113 so that the operator can visually confirm the execution status of the transmission process.

  Next, in step S <b> 302, the operator operates the input unit 170 of the determination target device 2, and the communication unit 43 of the determination target device 2 transmits the component information p to the authenticity determination device 1 triggered by this operation. The operation on the input unit 170 may be performed within a certain period of time before and after transmission by the determination information acquisition device 5 in step S301, and may be immediately after transmission, simultaneously with transmission, or immediately before transmission.

  Next, in step S303, the received data verification unit 160 verifies the validity of the set of the received device information d, signature information s, and component information p. Specifically, whether the received device information d, signature information s, and component information p are information provided by the same operator is included in information such as reception time, transmission time, and IP address. Verify based on. For example, when these pieces of information are received within a certain period of time, it is determined that the information comes from the same operator.

  Next, in step S304, the received data verification unit 160 determines whether or not the verification executed in step S303 is successful. For example, since the device information d, the signature information s, and the component information p are received within a certain time, if it is determined that the information is provided by the same operator, the verification is successful. Determination is made, and the process proceeds to step S305 due to a Yes branch. On the other hand, if it is determined that the verification is unsuccessful, the process proceeds to step S306 due to a No branch, notifies the determination information acquisition apparatus 5 that the determination target apparatus 2 is not a valid apparatus, and ends the process.

Next, in step S305, the signature verification unit 21 of the authenticity determination apparatus 1, the received signature information s is the component information p, whether the correct signature information for device information d, verification key k _v signature verification operations F _{Perform v} to verify. Specifically, as in step S203 of the first embodiment, the signature verification unit 21 generates signature target information m as a concatenation of the component information p and the device information d. The signature verification calculation Fv is performed to verify the validity of the set of the signature object information m and the signature information s, and the verification result r is obtained.
<Signature verification operation>
r = Fv (m, s, e) = “successful verification” (when m = s ^e (mod n))
“Verification failure” (when m ≠ s ^e (mod n))
Here, m: signature target information, s: signature information, e, n: public information (verification key k _v ).

  Next, in step S <b> 307, the determination unit 22 determines whether the verification is successful based on the verification result r by the signature verification unit 21. If the verification result r is “verification successful”, the process proceeds to step S308 due to a Yes branch, and notifies the determination information acquisition apparatus 5 that the determination target apparatus 2 is a valid apparatus. If the verification result r is “verification failure”, the process proceeds to step S309 due to a No branch, and notifies the determination information acquisition apparatus 5 that the determination target apparatus 2 is not a valid apparatus. The determination information acquisition device 5 notified of the determination result displays the determination result on the display unit 113 together with the device information d. Note that when there are a plurality of possible combinations from the same operator, the signature verification operation is performed on all the combinations.

The display unit 113 of the determination information acquisition device 5 that has received the verification result r displays the determination result that the determination target device 2 is a valid device if the verification result r is “verification success”, and the verification result r is “ If “Verification failed”, a determination result that the determination target device 2 is not a valid device is displayed.
The above is the authenticity determination process of (4).

  As described above, in the invention according to the present embodiment, the authenticity determination device 1 acquires the component information p of the determination target device 2 through the connected network and receives it separately by an operator's input operation. With respect to d and signature information s, a process for verifying whether or not the acquired component information p is valid data has been added. There is an effect that the authenticity determination can be performed with higher accuracy than in the case of the code alone.

  Note that when the operator operates the input unit 170 of the determination target device 2 to explicitly transmit the component information p, the determination unit 22 of the authenticity determination device 1 receives the component information p received from different devices, It is possible to determine that the device information d and the signature information s are information brought from the same operator.

  Further, the variation of the implementation described in the first embodiment can be similarly applied to the second embodiment.

  In the second embodiment, in the authenticity determination process (4), the determination unit 22 of the authenticity determination device 1 verifies the validity of the component information p, the device information d, and the signature information s. The determination target device 2 and the determination information acquisition device 5 are each provided with a position information acquisition unit, and the position information of each device is also transmitted, so that the validity of the determination target device 2 is verified using the position information. It is also possible. Specifically, based on the position information of each device, when it is determined that the distance between the devices is equal to or less than a certain value, it is determined that the information is provided by the same operator. The position information acquisition unit can be realized using GPS (Global Positioning System) or the like.

  As another method for verifying the validity of the determination target device 2, the determination information acquisition device 5 has a random number generation unit, and the random number generated and displayed by the determination information acquisition device 5 is input to the determination target device 2. It is also possible to input the random number to 170 and transmit the random number from each device to the authenticity determination device 1. Conversely, the same can be realized by providing the determination target device 2 with a random number generation unit and a display unit, and providing the determination information acquisition device 5 with an input unit. The displayed random number may be manually input to each device, or may be mechanically read by providing a random number reading unit.

  In the second embodiment, the authenticity determination device 1 verifies the validity of the determination target device 2. However, the authenticity determination device 1 has a random number generation unit so that the same random number is assigned to the determination target device 2. It is also possible to confirm the legitimacy of the determination target device 2 by transmitting it to the determination information acquisition device 5 and displaying it, and confirming the identity of the random number by the operator. In this case, if the authenticity determination device 1 can identify the device or the IP address of the device from the device information d, the input unit 170 of the determination target device 2 is not necessary, and the authenticity determination device 1 automatically determines the determination target. It is also possible to acquire the component information p stored in the component information storage unit 41 of the device 2.

DESCRIPTION OF SYMBOLS 1 Authentication determination apparatus, 2 Determination object apparatus, 3 Determination information registration apparatus, 4 Authentication determination system, 5 Determination information acquisition apparatus, 6 Internet, 20 Verification key memory | storage part, 21 Signature verification part, 22 Determination part, 23 43 83 112 Communication Unit, 30 70 100 120 bus, 31 71 101 121 memory, 32 72 102 122 processor, 33 73 104 125 communication module, 34 74 105 126 input interface, 35 75 106 127 display, 40 components, 41 component information storage unit, 42 Component information acquisition unit, 44 Device information storage unit, 45 Signature storage unit, 80 Signature key pair generation unit, 81 Signature key pair storage unit, 82 Signature generation unit, 84 Judgment information registration unit, 103 Bar code printer, 110 Component information Acquisition unit, 111 Device information The resulting unit, 113 display unit, 123 a bar code reader, 124 camera, 160 received the data verification unit, 170 input unit.

Claims (4)

Component information indicating information of components constituting the inside of the determination target device for which authenticity is determined, device information indicating unique information of the determination target device, the device information of the determination target device, and the component information A communication unit for receiving signature information for the pair;
A verification key storage unit that stores a verification key corresponding to the generated key that generated the signature information;
A signature verification unit that verifies the validity of a set of the component information, the device information, and the signature information received by the communication unit, using the verification key;
A determination unit that determines authenticity of the determination target device based on the validity verified by the signature verification unit ;
The device information and the signature information received by the communication unit from a determination information acquisition device that acquires the component information from the determination target device via a network and acquires the device information and the signature information from the determination target device. , and a reception data verifying unit for verifying the validity for the set of the acquired component information,
The signature verification unit, true counterfeit determination device that to verify the authenticity of the component information received data verification unit has verified the validity and the device information to the set of the said signature information. The authenticity determination device according to claim 1, wherein the device information and the signature information are stored in an optically readable form in the determination target device. A device information storage unit for storing device information indicating its own unique information, a component information storage unit for storing component information indicating information of components constituting its own, and a combination of the device information and the component information A determination target device including a signature storage unit that stores signature information for
And the determination from the target device and the device information includes a device information acquisition unit that acquires said signature information, to signal the previous SL device information sending and the signature information determination information acquisition device,
It receives the component information from the determination target device, a communication unit which receives said signature information and the determination information obtaining unit whether we pre Symbol device information, the component information received by the communication unit and the device information the A received data verification unit that verifies the validity of the pair with the signature information; a verification key storage unit that stores a verification key corresponding to the generated key that generated the signature information; and the received data verification using the verification key A verification unit that verifies the validity of the set of the component information, the device information, and the signature information that has been verified by the unit, and the determination target device based on the validity that the signature verification unit has verified. An authenticity determination system including an authenticity determination device including a determination unit that determines authenticity. An authentication method of an authentication device for determining the authenticity of a device to be determined,
Communication unit, before Symbol decision constituting the interior of the target device receives the component information indicating the information of the part from the determination target device, the device information indicating the specific information and the device information part information of the determination target device A communication step of receiving the device information and the signature information from the determination information acquisition device that acquires the signature information for the set of information from the determination target device ;
A received data verification unit that verifies the validity of the set of the component information, the device information, and the signature information received by the communication unit;
The signature verification unit uses the verification key corresponding to the generation key that generated the signature information, and the validity of the set of the component information, the device information, and the signature information verified by the reception data verification unit A signature verification step to verify
An authenticity determination method comprising: a determination unit that determines the authenticity of the determination target device based on the validity verified by the signature verification unit.

Images